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Abstract 

A weakly complete finitary axiomatization for EQPL (exogenous 
quantum propositional logic) is presented. The proof is carried out 
using a non trivial extension of the Fagin-Halpern-Megiddo technique 
together with three Henkin style completions. 


1 Introduction 

A new logic (EQPL - exogenous quantum propositional logic) was proposed 
in [mcH] for modeling and reasoning about quantum systems, embodying 
all that is stated in the postulates of quantum physics (as presented, for 
instance, in [9l I21|i. The logic was designed from the semantics upwards, 
starting with the key idea of adopting superpositions of classical models as 
the models of the proposed quantum logic. 

This novel approach to quantum reasoning is quite different from the 
traditional approach [HIHl to the problem that, as initially proposed by 
Birkhoff and von Neumann [^, focuses on the lattice of closed subspaces 
of a Hilbert space. Our exogenous semantics approach has the advantage 
of closely guiding the design of the language around the underlying con¬ 
cepts of quantum physics while keeping the classical connectives and was 
inspired by the possible worlds approach originally proposed by Kripke m 
for modal logic. It is also akin to the society semantics introduced in [7j 
for many-valued logic and to the possible translations semantics proposed 
in |H] for paraconsistent logic. The possible worlds approach was also used 
in El isi 13 m HU m for probabilistic logic. Our semantics of quantum 
logic, although inspired by modal logic, is also completely different from the 
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alternative Kripke semantics given to traditional quantum logics (as first 
proposed in cni) still closely related to the lattice-oriented operations. For 
other examples of logics based on the exogenous semantics approach see m- 

Contrarily to traditional quantum logics that replace the classical con¬ 
nectives by new connectives inspired by the lattice-oriented operations, by 
adopting superpositions of classical models as the models of the quantum 
logic, we are led to a natural extension of the classical language containing 
the classical connectives (like modal languages are extensions of the classical 
language). 

Furthermore, the new logic allows quantitative reasoning about ampli¬ 
tudes and probabilities, being in this respect much closer to the possible 
worlds logics for probability reasoning than to the traditional quantum log¬ 
ics. For other developments in this direction, also motivated by applications 
in quantum computation and information, see [13 mi- 

Herein, we present a finitary Hilbert calculus for EQPL and show that it 
is weakly complete relatively to an oracle for arithmetical reasoning. Strong 
completeness is out of question since entailment is not compact. The proof 
of the weak completeness result was carried out using a non trivial exten¬ 
sion of the technique proposed by Fagin, Halpern and Megiddo for simple 
probabilistic logics, together with three Henkin completions. 

Although EQPL only provides the means for propositional, quantitative 
reasoning about quantum states, it is a mandatory step before further de¬ 
velopments towards calculi for reasoning about the evolution of quantum 
systems (as already outlined in CHI). The weak completeness result estab¬ 
lished here is interesting from the theoretical point of view and shows that 
the proposed language fits the proposed exogenous semantics. But, for prac¬ 
tical applications in quantum system specification and verihcation, it seems 
better to go for model checking techniques. 

Such future developments of our approach to quantum reasoning are 
briefly discussed in Section 6 of the paper. In Section 2, we briefly motivate 
the EQPL semantic concepts and key design ideas, directly based on the 
postulates of quantum physics. In Section 3, we present the EQPL language 
and semantics plus some examples. In Section 4, we introduce the axioms 
and rules of EQPL. Section 5 is fully dedicated to the proof of the main 
result (weak completeness of EQPL). 
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2 Key design ideas 

Starting from the postulates of quantum mechanics (closely following [Hj) 
we present the key ideas that guided the design of EQPL (together with a 
brief review of the relevant concepts and results of operator theory). 

Postulate 1: Every isolated quantum system is described by a Hilbert 
space. The states of the quantum system are the unit vectors of the corre¬ 
sponding Hilbert space. 

Recall that a Hilbert space is a complete inner product space over C (the 
field of complex numbers). For example, the states of an isolated qubit are 
vectors of the form zqIO) + 2i|l) where zq,zi € C and |zoP + \zi\‘^ = 1. In 
other words, they are unit vectors in the (unique up to isomorphism) Hilbert 
space of dimension two. Concerning EQPL, it is natural to represent each 
qubit by a propositional symbol (more appropriately called a qubit symbol). 
Furthermore, each qubit state (better called qubit valuation) should be a 
superposition of the two possible classical valuations. 

Postulate 2: The Hilbert space of a quantum system composed of a finite 
number of independent components is the tensor product of the component 
Hilbert spaces. 

For example, zoo|00)+ 2oi|01)+ zio|10)+ zii|ll), where 200 ,^ 10 ,^ 01,^11 G 
C and l^ooP + koiP + kioP + l-^iiP = 1, is the general form of the states of 
an isolated pair of qubits. Returning to the design of EQPL, we conclude 
that we need two qubit symbols for working with two qubits. Moreover, in 
this case, a quantum valuation should be a superposition of the four possible 
classical valuations. 

It is easy to generalize this idea to a finite set of qubits. However, as 
usual in logic, we would like to work with a fixed, denumerable alphabet of 
qubit symbols: 

qB = {qbfc : /c G N}. 

But, then, what should be the Hilbert space for qB? The answer, a key in¬ 
gredient of the envisaged EQPL semantics, is the Hilbert space TC = TL{2^^) 
that we define by free construction from the set 2 *^^ of all classical valuations 
over qB. This free construction is as follows. Given an arbitrary set V, the 
Hilbert space 'H(R) is as follows: 

• Each element of 7^ is a map {fj) : R —> C such that: 

— suppd'i/;)) = {v : \ip){v) 7 ^ 0 } is countable; 

- X] IIV')(^)P < 00. 

v^V HGsupp(|i/’}) 
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• IV'i) + IV'2) = Av. \'lpl){v) + \'lp 2 ){v). 

• alip) = Xv. al'ijj) (v). 

• {'1PM2) = '^\iJl)iv)\ll! 2 ){v). 

vev 

The inner product induces the norm 111^^)11 = (V'lV’) and, so, the distance 

d{\^pl) , \'ip 2 )) = IIIV’i) “ |V'2)||- Since 'HiV) is complete for this distance, 
H^V) is a Hilbert space^. 

Given v £2^^, |u) is the vector of H defined as follows; |u)(u) = 1 and 
\v){v') = 0 for every v' 7^ v. Observe that {|u) : u G H} is an orthonormal 
basis of 7i. This basis will play an important role in the semantics of EQPL 
and for this reason we refer to it as being the logical basis of 7i. 

The unit vectors of 7i are the envisaged quantum valuations over qB. 
Given a quantum valuation |'0) and a classical valuation v, the inner product 
(ulV^) is said to be the logical amplitude of jV') for v. As we shall see, these 
logical amplitudes are at the core of EQPL. 

Observe that it is useful to be able to work with a constrained set V 
of admissible classical valuations. That is, it is sometimes convenient to 
work with V C Indeed, we may want to impose classical constraints on 
the quantum valuations. For example, we may want to impose (qbj^ V qba), 
constraining the quantum system to states giving amplitude zero to every 
valuation not satisfying this classical formula. Therefore, concerning the 
semantics of EQPL, we conclude that a quantum interpretation structure w 
should contain at least a set 1/ C 2*^® (the set of admissible classical valua¬ 
tions) and a unit vector |^) in Td (the quantum valuation or the quantum 
state) such that {v\'4)) = 0 for every v . 

Since we start with the semantics for the whole system (composed of 
the denumerable set qB of qubits), what is the role of Postulate 2? More 
precisely, how can we identify an independent subsystem? The solution is 
“tensor factorization” that we proceed to explain. 

Given S' C qB and V C 2*^^, we introduce V[5] = {u|5 : u G P} and 
= {^^lqB\5 ■■ V € V}. We also need Tdisj = n((2^^)is]) and Tijsi = 
7d((2^^)jsf). Then, 7d(V) is a subspace of 7^(2*^^); 7d = diys] ® 

'H{V) C 'H{V\^s]) ® '^(y]S\) where equality does not hold in general. 

Given a unit \'4)) G 77, if there are unit \'4)') G 77[5] and unit \'4)") G 77]s[ 
such that IV’) = IV’O ® W) then we say that, at state |V’), the qubits in S 
are not entangled with those outside S. In this situation, the state |V’) is 

^Isomorphic to L^iV, if) where H is the counting measure over V. 
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said to be 5-factorizable. Furthermore, a vector |^/)) G '^[s] is said to be 
non factorizable if there is no proper subset S' of S such that there are unit 
\‘4)') G and unit G 'H]^s\S'] such that \'4)) = IV^') iX) W)- 

Having in mind these semantic notions, given a finite set F of qubit 
symbols, we conclude that the language of EQPL should provide the means 
for writing assertions about; 

• non entanglement; “the qubits in F are not entangled with the other 
qubits” (that is, the quantum state at hand is E-factorizable); this 
assertion is made, as we shall see, with the EQPL formula [F]; 

• logical amplitudes; “the amplitude of a classical valuation over F is 
equal to a complex number”; that is, we need terms denoting arbi¬ 
trary complex numbers and terms denoting logical amplitudes; more 
precisely, as we shall see, when the quantum state is E-factorizable, 
the EQPL term |T)^^ denotes the amplitude of the (unique) classical 
valuation over target F that satisfies the qubits in A C E and does 
not satisfy the qubits in F \ A. 

Other useful quantum constructions will be introduced as abbreviations, 
including inter alia: 

• [G|E] - formula stating that the quantum state is G-factorizable if it 
is E-factorizable. 

• “ term roughly denoting the amplitude of if this classical 
valuation satisfies a, and equal to zero otherwise. 

• ([E]0 a : li) - formula stating that the quantum state is E-factorizable 
and that there is a classical valuation over E in the E-component of 
the quantum state satisfying a and with non null amplitude u. 

Unfortunately, the amplitude terms are not always meaningful on a given 
pair (U, |'0)). Namely, they require that the target qubits are not entangled 
with the others. Therefore, we need more information in the envisaged 
notion of quantum interpretation structure. But, before we are ready to 
give the definition, we need some additional notation about partitions of 
qB. Given a partition S of qB, let U5 be the set of all unions of elements of 
S. That is, U5 = {UseT^ S : TZ F 5}. 

A quantum interpretation structure is a tuple w = (U,5, where; 

• U is a nonempty subset of 2^®. 
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• 5 is a finite partition of qB. 

• IV') = {|'0)[i?]}i?eu5 where each |'0)[/j] is a unit vector of TYj/jj and such 
that: 

1- lV')[0]=e*°; 

2- \'^)lR] = IV’)[5] for each non empty R £ U5; 

S £S 
SCR 

3. |V')[5] is non factorizable for each S £ S; 

4- {v\i^)[ciB] =0ifv^V. 

• ■ {i^FA}FCfl„qB,ucF where each upA e C and rra = {va\'^)[p] if 
F £ US. 

In such a structure we recognize the key elements V (the set of admissible 
classical valuations) and |V')[qB] quantum state of the whole system). 
The additional information is the factorization of |'0)[qB] map r that 

provides the means for interpreting amplitude terms even when they are 
physically undefined. In this way we avoided the need to work with partial 
interpretation structures. Observe also that, although we work m 7i = 
clause 4 in the definition above imposes that (up to isomorphism) 
we only consider quantum states in 7i{V). 

As we just saw, Postulates 1-2 were sufficient to guide us in the task 
of setting up the notion of quantum interpretation structure over which we 
shall be able to define the semantics of EQPL. Now, we turn our attention 
to the postulates concerning measurements of physical quantities. 

Postulate 3: Every measurable physical quantity of an isolated quantum 
system is described by an observable acting on its Hilbert space. 

Recall that an observable is a Hermitian operator such that the direct 
sum of its eigensubspaces coincides with the underlying Hilbert space. Since 
the operator is Hermitian, its spectrum H (the set of its eigenvalues) is a 
subset of M. For each e G H, we denote the corresponding eigensubspace by 
Eg and the projector onto Eg by Pg. 

Postulate 4: The possible outcomes of the measurement of a physi¬ 
cal quantity are the eigenvalues of the corresponding observable. When the 
physical quantity is measured using observable A on a system in a state \ip), 
the resulting outcomes are ruled by the probability space = (^) 
where in the case of a countable spectrum 

eCCl 
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For the applications we have in mind in quantum computation and in¬ 
formation, only logical projective measurements over a finite set of qubits 
are relevant. Given a quantum structure w = (F,5, for each finite 

set F of qubits, such measurements are defined using some observable Ap 
on H such that: 

• The spectrum of Ap is equipotent^ to Vypy 

• For each v' € ^[F]i the corresponding eigenspace Ep is generated by 
all vectors of the form |u') ® \v”) in 7i. Thus, each projector Pp is 
|u')(w'| <8) 

For example, if the system is in the particular state 


aoooji lOOwi) -|-aoiaj2|01‘^2) + aoiojs lOlws) + ai0aj4 |10u;4) 


then the probability of observing the first two qubits qbg, qb^ in the classical 
valuation 01 is given by |aoiaj 2 p + looiojaP- 

In general, the stochastic result of making a logical projective measure¬ 
ment of a finite set F of qubits of the system at w = (F,5, \ is fully 

described by the finite probability space where, for 

each U C Vypy. 


^w(^) = X] i(K©^^")iV')p- 

V'&U 

Here, v' 0 v” denotes the (unique) classical valuation over all qubits deter¬ 
mined by v' and v". 

Thus, we are able to say what is the probability in a given quantum state 
of observing a classical formula a as being true. That is, given a quantum 
structure w, we have the means for interpreting EQPL terms of the form 
(f a) that denote such probabilities. 

Finally, although irrelevant to the design of EQPL, we mention en pas¬ 
sant Postulate 5 that rules how quantum systems evolve. 

^The chosen bijection depends on how the qubits are physically implemented. For 
example, when implementing a qubit using the spin of an electron, we may impose that 
spin corresponds to true and spin — i corresponds to false. But, as we shall see, the 
semantics of EQPL does not depend on the choice of the bijection, as long as one exists. 
The same happens in the case of classical logic - its semantics does not depend on how 
bits are implemented. The details of which voltages correspond to which truth values are 
irrelevant. 
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Postulate 5: Excluding measurements, the evolution of a quantum sys¬ 
tem is described by unitary transformations. 

This last postulate becomes relevant only when designing a dynamical 
extension of EQPL (see [TH]i. 

3 Language and semantics 

The language of EQPL is composed of classical formulae, real terms, complex 
terms and quantum formulae that we proceed to introduce using an abstract 
version of the BNF notation EOl for a compact presentation of inductive 
definitions. For building terms, it is convenient to use real variables X = 
{xk : k €N} and complex variables Z = {z^ '■ k G N}. 

Classical formulae: 


a := qb [] (-> a) [] (a a) 

As usual, other classical connectives like A, V, AA, verum T and falsum T are 
introduced as abbreviations. We denote the set of qubit symbols occurring 
in a by qB(a). We say that a classical formula a is over a set S of qubit 
symbols if qB(a) C S. 

Real and complex terms (with the provisos computable real constant r, 
finite E C qB and A C F): 

( t := X D r D (fa) D (t + Q D (tQ D Re(u) Q Im(u) Q arg(u) Q |n| 

\ u := z [] |T)p^ [] (t + it) [] te** [] It [] (tt + n) [] (nu) [] (a O u; u) 

Most of these terms are self-explanatory or already motivated in the previous 
section. An explanation is needed concerning complex alternative terms: a 
term (a o ui] U 2 ) denotes the value denoted by ui if a is true, and denotes 
the value denoted by U 2 otherwise. 

Quantum formulae (with the proviso finite F C qB): 

7 := « D (i < i) D [-^] D (B 7 ) D (7 T 7 ) 

Quantum negation B and quantum implication □ are global operators and 
should not be confused with their classical (local) counterparts. As expected, 
other quantum connectives will be introduced as abbreviations. But, before 
introducing the whole set of useful abbreviations, we present the semantics 
of the language. 

Given a set S of qubit symbols and a set V of valuations, the extent at 
V of classical formulae over S is as follows: 
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• |a|y = {-U G V[5] : v Ihc a}. 

By an assignment p we mean a map such that p{x) G M for each x G X 
and p{z) G C for each z ^ Z. 

The denotation of terms at w = (V, u) and p is inductively defined 

as follows (we refrain from spelling out the obvious clauses for interpreting 
arithmetical expressions): 

• Hwp = p{x)-, 

• Wwp = r; 

• [(/a)lw, = 

• Wwp = piz)-, 

• IW faI'^p = ^FA] 

. [(od> u.;»2)w = | M;;;' 

• ... 

The satisfaction of quantum formulae at w = {V, S, {fj), n) and p is 
inductively defined as follows; 

• wp Ih a iff u Ihc a for every u G F; 

• wp Ih (ti < t 2 ) iff |tllwp < It 2 lwp; 

• wp Ih [F] iff T G U5; 

• wp Ih (By) iff wp 1/ 7 ; 

• wp Ih (71 □ 72 ) iff wp 1/ 7 i or wp Ih 72 - 

As anticipated in the previous section, the proposed quantum language 
with the semantics above is rich enough to express interesting properties 
of quantum systems. To this end, it is quite useful to introduce other op¬ 
erations, connectives and modalities through abbreviations. We start with 
some additional quantum connectives: 

• quantum disjunction: (71 U 72 ) for ((B 71 ) ^ 72 ); 

• quantum conjunction; (71 1172 ) for (B((B 7 i) U (B 72 ))); 


if wp Ih a 
otherwise ’ 
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• quantum equivalence: (71 = 72) for ((71 □ 72) H (72 □71)). 

Observe that the quantum connectives are classical in the sense that 
quantum tautologies hold. For instance, (((B72) □ (B71)) □ (71 □ 72)) 
is satished by every quantum structure and assignment. But they do not 
coincide with the classical connectives! For instance, (-i a) entails (B a) but 
not the other way around. For a more detailed discussion of the differences 
and relationship between these two versions of classical logic refer to Hi¬ 
lt is also useful to introduce some additional comparison predicate sym¬ 
bols: 


• {h < t 2 ) for ((ti < t 2 ) n {B{t 2 < fi))); 

• {h = t 2 ) for ((ti < t 2 ) n {t 2 < h)); 

• {ui = U 2 ) for ((Re(ui) = Re(tt 2 )) n (Im(ui) = Im(u 2 ))). 

Classical molecular formulae (classical conjunctions of literals) are used 
profusely in the sequel. To this end, we introduce the following abbreviation 
(with the provisos finite T C qB and A C F): 

• (Af^) for ((Aqb.eA qbfc) A (Aqb,e(nA) 

Observe that the formula {f\p A) specifies the unique classical valuation 
over F that satisfies the qubits in A and does not satisfy the qubits in T\^. 

Logical amplitude terms are easily extended to any classical formula 
besides verum (with the provisos qB(Q:) C F, finite T C qB and A C F): 

• I«)fa for {{(^fA) ^a)> |T)^^; 0 ). 

Intuitively, \a)p^ coincides with if satisfies a, and it is zero oth¬ 

erwise. 

Logical amplitude vector terms are introduced as follows (with the pro¬ 
viso qB(a) C F): 

• \a)p for {\a)p^)ACF- 

It turns out that it is convenient to introduce the additional syntactic 
category of logical amplitude vector terms for each finite set F of qubit 
symbols: 

1^^)^ = I«)f D (u D (1^^)^ + \^)f) 

with the obvious abbreviation rules for multiplication by scalar and addi¬ 
tion. Still concerning amplitude vector terms, the following abbreviations 
are handy: 


10 


. |0)^for (0|TM; 

• (I^i)f ~ \^‘i) f) (nACF(l^l)FA ~ \^2)fa))'i 

• (I^i)f — \^‘i) f) (nACF((l^l)FA 0 ) ^ (I^i)fA ~ I^2)fa)))- 

Finally, we are ready to introduce the rest of the interesting quantum 
operations, predicates and modalities: 

• [G|F] for (nA'CGnA"CF\G (I~'~)f(A'A") = l~'~)GA'l~'~)(F\G)A"))i 

• (qbfci ~F qbfcj for (B( 1 J [G])); 

qbfei e G 
qbfc2 ^ G 

• ([F]0 a : u) for {[F] □ |w| > 0 □ (Uacf(I “)fa = ^))); 

• ([F]0 ai : ui,... ,an ■■ Un) for (([F]0 ai : ui) □ ... n ([F]0 

• (Oa) for (0 < (f a)); 

• (□«) for (1 = (fa)). 

Most of these quantum constructions were already discussed in the previous 
section. The entanglement formula (qb^^ ~F qb^j) states that the two qubits 
are entangled. 

Quantum molecular formulae (quantum conjunctions of literals) are also 
very useful. Note that a quantum literal is either a quantum atom or the 
quantum negation of a quantum atom. Looking at the grammar of quantum 
formulae, it is clear that quantum atoms are either classical formulae, or 
comparisons between real terms or non entanglement assertions: 

qAtom := a [] (t < t) [] [F] 

To this end, we introduce the following abbreviation (with the provisos finite 
Q C qAtom and D Q Q): 

• (Hq for ((n^eD '^) (n5e(Q\D) 

Observe that a quantum molecular formula defines a set of quantum struc¬ 
tures that may be empty because, for instance, the quantum molecular for¬ 
mula (a n (“■a)) has no models (here Q = {a, {^a)} = D). 

We finish this section with a simple example. Consider the following 
variant of Schrodinger’s cat. The relevant attributes of the cat are: being 
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inside or outside the box, alive or dead, and moving or still. These three 
attributes are represented by the qubits qbg,qb^,qb 2 , respectively. For the 
sake of readability we use instead cat-in-box, cat-alive, cat-moving, re¬ 
spectively. The following EQPL formulae constrain the state of the cat at 
different levels of detail; 


1 . 

2 . 

3. 

4. 

5. 

6 . 


[cat-in-box, cat-alive, cat-moving]; 

(cat-moving cat-alive); 

((0 cat-alive) □ (0 (-■ cat-alive))); 

(B [cat-alive]); 

((/cat-alive) = i); 

([cat-alive, cat-moving] 0 (cat-alive A cat-moving) 
(cat-alive A (-■ cat-moving)) : 

((-■cat-alive) A (-■ cat-moving)) : e^sW^). 


1 

v^’ 


Observe that the assertions above are consistent with each other. Intuitively, 
assertion 1 states that the qubits cat-in-box, cat-alive, cat-moving are 
not entangled with the other qubtis of the cat system. Assertion 2 is a 
classical constraint on the set of admissible valuations: if the cat is moving 
then it is alive. Assertion 3 states the famous paradox: the cat can be in a 
state where it is possible that the cat is alive and it is possible that the cat 
is dead. Assertion 4 states that the qubit cat-alive is entangled with other 
qubits. Assertion 5 states that the cat is in a state where the probability of 
observing it alive (after collapsing the wave function) is Finally, assertion 
6 states that the qubits cat-alive, cat-moving are not entangled with other 
qubits and that in the quantum state there is a classical valuation with 
amplitude where the cat is alive and moving, there is another classical 
valuation also with amplitude where the cat is alive and not moving, and 


there is a classical valuation with amplitude 
(and, thus, thanks to 2, also not moving). 



where the cat is dead 


4 Axiomatization 

Entailment for EQPL may be defined as expected - we say that F entails S, 
written FNr/, itw/olhr/ for every w and p satisfying every element of F. 
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But a finitely bounded version of entailment turns out to be more relevant. 
Given a finite set F of qubit symbols, a quantum structure w = iV, S, ip, v) 
is said to be F-factorizable if F G U 5 . Given a set F of quantum formulae 
over F and a quantum formula r] also over F, we say that the former F- 
entails the latter, written F 1=^ rj if wp Ih p for every F-factorizable w and 
p satisfying every element of F. 

Observe that F 1 = ry implies T \=f p for every F. Furthermore, for any 
F and p over Fi, if Fi C F 2 and T 1=^^ V then F 1 =^?^ p. Note also that 
p2 iff F Fir {pi □ P2), and a similar result holds for the unbounded 
entailment. That is, quantum implication does internalize the notion of 
quantum entailment in EQPL. 

It is also straightforward to verify that both entailments (unbounded 
and bounded) are not compact in the sense that there are F and p such that 
p is entailed by F but it is not entailed by any finite subset of F. Therefore, 
there is no hope of setting up a finitary axiomatization (that is, using only 
finitary rules) achieving strong completeness. But, it is possible to establish 
a finitary axiomatization that achieves F-bounded weak completeness for any 
finite F: \=f p \-f P- Indeed, the axioms and rules presented below are 
sound and adequate for F-validity as will be proved in the next section. 

Before listing all axioms and rules we need to introduce the concept of 
tautological quantum formula or quantum tautology. A quantum formula 7 is 
said to be tautological if there are a classical tautology a and a substitution 
map O' ; qB ^ qAtom such that 7 coincides with ag^cr. For instance, 
the quantum formula ((xi < X2) □ (xi < X2)) is tautological (obtained, for 
example, from the classical tautology (qb^=^qb^)). We also need the concept 
of arithmetical language; 


V 

a 

b 


(a < a) D (Bu) D (uDu) 

D D (« + a) D («a) D Re(6) Q Im(6) Q arg(6) Q |6| 
zW{a + ia)W ae*“ [] 6 [] (6 + 6) [] (6 6) 


Observe that an assignment p is enough to interpret arithmetical formu¬ 
lae. An arithmetical formula v is said to be valid if it is satisfied by ev¬ 
ery assignment. For instance, (((ti < t2) n {t2 < ts)) □ (ti < ts)) and 
((uf = — 1 ) □ ((ui = f) U (tti = —i))) are both universal arithmetical for¬ 
mulae (the latter using equality between complex numbers introduced as an 
abbreviation). 

We are now ready to list the axioms and rules of our calculus for each 
finite set F of qubit symbols: 


• FiT’ a for each classical tautology a [GTaut]. 
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• ai, {ai 0 C 2 ) l“F CK2 [CMP], 

• hiT’ 7 for each quantum tautology 7 [QTaut]. 

• 71, (71 □ 72) \-F 72 [QMP], 

• \-p for each valid arithmetical formula v [Oracle]. 

• hi;’ ((ai 02) ^ (cKi ^02)) [Lift=^]. 

• hi;’ ((ai n a2) □ (ai A a2)) [Refnj. 

• hi;’ (a □ {{a t> ui; U2) = ui)) [IfTj. 

• hi;’ ((B a) □ ((a O ui] U2) = ^2)) [If-L]. 

• hi. [F] [NEtgFj. 

. hi. ([G2] □ ([Gi] = [G1IG2])) for any Gi C G2 [NEtgj]. 

. hi. ([Gi] □ ([G2] □ [Gi U G2])) [NEtgUj. 

. hi. ([Gi] □ ([G2] □ [Gi \ G2])) [NEtg\]. 

• (|T)00 = 1 ) [Empty]. 

. hi. ((-(Ai.hl)) □ (|T)^^ = 0 )) [NAdm]. 

• ^f([G]b((EacgI|T)gaP) = 1)) [Unit]. 

• ((fa) = (Eacf II«)faI^)) [Prob]. 

In total, we have only two rules (modus ponens for classical implica¬ 
tion [CMP] and for quantum implication [QMP]^) and fifteen axioms. The 
axioms are better understood in the following groups. 

We have as axioms the classical tautologies and the quantum tautologies 
([CTaut] and [QTaut], respectively). Since the set of classical tautologies 
and the set of quantum tautologies are both recursive, there is no need to 
spell out the details of tautological reasoning. 

Axiom [Oracle] is more controversial - we accept as an axiom any valid 
arithmetical formula. The set of valid arithmetical formulae is not even 
recursively enumerable, hence the name we chose for the axiom. We decided 
to use an arithmetical oracle for two reasons. First, we wanted to focus our 
attention on reasoning about quantum aspects without becoming lost in 

® Actually, [CMP] can be derived from [QMP] and [Lift=>]. 
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arithmetical details. And, second, the alternative of presenting a recursive 
axiomatization based on the theory of algebraic closed fields would require, 
in order to maintain completeness, a relaxation of our semantics, maybe 
towards a point too far away from its intuitive roots in the postulates of 
quantum mechanics. However, this alternative is interesting also for other 
reasons and we shall come back to the issue in the last section of the paper. 

Axioms [Lif=>] and [Refn] are sufficient to relate (local) classical reason¬ 
ing and (global) quantum tautological reasoning. Again, we refer to for 
more details. 

Axioms [IfT] and [If-L] are self explanatory. They will be used in the 
completeness proof to remove alternative terms. 

Axioms [NEtgF], [NEtg|], [NEtgU] and [NEtg\] are enough to reason 
about non entanglement. Among other things they impose that non entan¬ 
glement is closed under set theoretic operations (closure under intersection 
appears as a theorem as we shall see). 

Axioms [Empty], [NAdm] and [Unit] rule logical amplitudes. Each of 
them closely reflects a property of our semantic structures. 

Einally, axiom [Prob] relates probabilities and amplitudes, closely fol¬ 
lowing Postulate 4. 

As expected, we say that a formula r] over F is an F-theorem, written 


\-F r] if we can build a derivation of r] from the axioms using the rules (for 
F). As an illustration, consider the following derivation that establishes for 
any finite F: 

. hi. ((/T) = 1) [PUnit]. 


1 [F] 

NEtgE 

2 ([E]:^((EAccl|T)^^r) = l)) 

Unit 

3 ((EACcl|T)fAr) = l) 

QMP:1,2 

4 ((/T) = (E^cf1|T>^aI^)) 

Prob 

5 (((/T) = (E^cFl|T>^^r))^(((EACc 

||T)^^|2) = 1)d((/T) = 1))) Oracle 

6 (((EaccI1T)^aP) = 1)^((/T) = 1)) 

QMP:4,5 

7 ((/T) = 1) 

QMP:3,6 


We hnish this section with a list of interesting E-theorems. Some of 
them will be used in the proof of weak completeness presented in the next 
section, but others are mentioned just for illustration purposes. 
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The following theorem is a direct consequence of the non entanglement 
axioms and completes the picture of non entanglement being closed under 
set theoretic operations. 

. hi. ([Gi] □ ([G 2 ] □ [Gi n G 2 ])) [NEtgn], 

The following theorems give some insight on the major properties of logical 
amplitudes. 

• hi. ((|(ai V a2))Q + |(ai A a2))G) = (I«i)g + I“2)g)) [AAdd]. 

• hi. ((ai ^ 02 ) □ (|ai)G ^ I«2 )g)) [AMon]. 

• hi. ((ai <^a 2 ) □ (|ai)G = |a2)G)) [ASoE]. 

• hi. (a □ (|a)c. = |T)^)) [ANec]. 

• ((|a)G + I(-«))g) = |T)g) [AMExc]. 

The first of the following theorems about probability after measurements just 
states finite additivity. The second is an obvious instance of Postulate 4. The 
third relates logical reasoning with probability reasoning (monotonicity). 

. hF(((/(aiVa2)) + (/(aiAa2))) = ((/ai) + (/a2))) [PAdd], 

• l-F (dOlO (Ac'4) : «) ^ ((/(Ag- 4)) = l“P)) [Mea-d- 

• Pf ((ai ^ a 2 ) □ ((/ai) < (/as)}) [PMoii]. 

The following theorems show that the quantum and probability modalities 
do behave as normal modalities. 

• h/. (([G]0 (a V a') : u) = (([G]0 a : u) U ([G]0 a' : u))) [QNorm]. 

• h/. ((a a') □ (([G]0 a : u) O ([G]0 a' : u))) [QMon]. 

• h/. {{u = u') □ (([G]0 a : u) □ ([G]0 a : u'))) [QCong]. 

• hi. (a □(□«)) [PNec]. 

• hi. ((□(« ^ a')) □ ((Da) □ (Da'))) [PNorm]. 
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5 Proof of bounded weak completeness 


It is straightforward to prove that the calculus presented in the last section 
is strongly sound - for any finite F C qB, iiT \-f r] then T \=f rj. Therefore, 
it is also weakly sound. 

On the other hand, as already pointed out, it is not possible to achieve 
strong adequacy with a Unitary calculus. But, for arbitrary finite F C qB, 
we were able to prove F-bounded adequacy of the calculus - li \=f rj then 
T \-F r]- Therefore, since we have soundness, our calculus is F-bounded 
weakly complete - r/ iff t/. 

The quantitative nature of the language of EQPL raises specific problems 
when proving an adequacy result. These problems appear on top of those 
raised by the fact the calculus is not strongly complete. Thus, the traditional 
Henkin approach to adequacy proofs m is not the answer here, or, at least, 
is not the full answer. 

In the end, we were inspired by the Fagin-Halpern-Megiddo technique 
that was successfully applied in proving adequacy results for probability 
calculi m- The key step of this technique is the reduction of any formula 
to a disjunction of systems of linear inequations over the real numbers where 
each variable represents the probability of a classical molecular formula. A 
close exam of the technique suggests that it should be applicable (possibly 
after a suitable non trivial extension) to any quantitative logic where the 
disjunctive normal form lemma holds. 

Actually, a quite significant revamp of the Fagin-Halpern-Megiddo tech¬ 
nique was needed in order to cope with the novel aspects of FQPL: (i) clas¬ 
sical formulae mixed with arithmetic (in)equations; (ii) global semantics of 
quantum connectives; (iii) non entanglement atoms; (iv) amplitude terms 
besides probability terms; and (v) quantum structures instead of probability 
spaces. Note that the Fagin-Halpern-Meggido technique was first developed 
for a probabilistic logic somewhat simpler than the probabilistic fragment 
of FQPL. 

In addition, we used the Henkin technique thrice: (i) for removing al¬ 
ternative terms; (ii) for constructing the set of admissible valuations; and 
(iii) for building the finite partition of the set of qubits. 

The rest of this section contains a step by step presentation of the proof 
of the F-bounded weak adequacy of EQPL. 

Given a quantum formula 7 over F we say that it is F-consistent if 
[/f (Bt)- The proof is carried out by contraposition: 

I. Assume that I/f 7- 
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2. So, quantum tautologically, also l/i? (B(B7)). 

3. Thus, (By) is F-consistent. 

4. Therefore, by the main lemma proved below, there are F-factorizable 
w and p such that wp Ih (By). 

5. And, hence, it is not true that every such pair satisfies y, that is, we 
established that 'ffpl- 

It remains to prove the model existence lemma: If'jis F-consistent then 
there are F-factorizable w and p such that wp Ih y. 

The quantum disjunctive normal form lemma holds in EQPL. Thus: 

( 7 = U 

\ DGqmols(7) 

where qmols(y) = {D C : hj? ((ng^Z)) □ y)} and Q.y is the set of 
F-quantum atoms used in y. 

Clearly, y is F-consistent iff there is F G qmols(y) such that (rig^F) 
is F-consistent. Therefore, it is sufficient to prove the following restricted 
model existence lemma: If {\~\qD) is F-consistent then there are F-faetor- 
izable w and p such that wp Ih (JIqD). 

Since D = DcU F< U Fjj, where Dc F = {a : a € Q}, D< C = 
{(t < t') : {t < t') G Q}, and F[] C Q[] = {[G] : [G] G Q}, we have: 

(HqF) = {{ngM n (nQ<F<) n (Hq^jF;])). 


Our goal is to reduce everything to inequations. We start by getting rid 
of the non entanglement atoms. 

Thanks to NEtgF and NEtg|, we know that there is a quantum formula 
(5[] without non entanglement atoms such that hj? ((FIqjjFj]) = (5[]). Thus, 
hi. ((HqF) = 6) where 5 = ((Hg^F^) □ (ng<F<) n 5[]). 

Note that (5[] and, hence, 5 are not necessarily conjunctions of quantum 
literals (because it may happen that a [G] appears in Q[] \ Fjj and such 
a negation involves a disjunction). Using again the quantum disjunctive 
normal form lemma we have: 


\~F 


S = □ (ng,F) 

DGqmols((5) 
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So, 5 is F-consistent iff there is F G qmols((5) such that (nq^D) is F- 
consistent. Therefore, it is sufficient to prove the following even more re¬ 
stricted model existence lemma: If (nqD) without entanglement atoms is 
F-consistent then there are F-factorizable w and p such that wp Ih (jlgD). 

Assume that (flgD) is F-consistent and does not involve non entangle¬ 
ment atoms (that is, Q = QcDQ< and D = FcUF<). Our goal is to find an 
F-factorizable w = (F,5, {fj),!/) and a p satisfying this molecular formula. 
We start by looking for V. 

Before setting up V, it is necessary to eliminate the probability and 
alternative terms and to add maximally consistent information about the 
admissible classical valuations. This desideratum is achieved as follows: 


1. First, we replace in (riqD) each term (fa) by 
(H-qD) be the result. 

2. Consider an ordering of the guards of alternative terms 

occurring in (rigF). 

3. Consider the following sequence of formulae: 

• ho = (nqF)}; 

^ f (% n ak) if biT (pk O ak) 
hk-t-i < 1 ^ (p/,n(Bak)) otherwise 

4. Observe that each pk is still F-consistent and a quantum molecular 
formula. Furthermore, pm is maximal with respect to guards. 

5. Now we can replace each term (a O up, U2) occurring in pm by: 

• ui if a is a quantum literal in pm', 

• tt2 if (Ba) is a quantum literal in pm- 


Let be the resulting formula. 

6. Consider an ordering Ai,..., A^' of the subsets of F. 

7. Consider the following sequence of formulae: 

• ho = hm', 

• F = / ^ (^('^pAk))) if biT (p(. □ (^(ApAk))) 

Ik-hi f |-| (□(-'(AiT’Afc)))) otherwise 
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8. Observe that each is still F-consistent and a quantum molecular 
formula. Furthermore, does not contain probability terms or al¬ 
ternative terms and is maximal with respect to admissible classical 
valuations. 

9. Thanks to Prob, IfT and IfT, denoting the resulting still T-consistent 

molecular formula by {PiqiD') = □ (FIq/^D^)), we have 

{{y^Q'D') □ (HgT))). 

10. Therefore, we may proceed working towards the envisaged w and p 
with the new formula. 

Having (while preserving F-consistency) eliminated the probability and 
alternative terms and having determined the classical valuations, we are 
ready to build V. Let V be composed of each v G 21*^1 such that u Ih a for 
each a G D'^. Now we have to analyze two cases: 

a) Either for each a G Q'^\ there is a u G F such that v l/c « and, 

therefore, this V is viable because 

(F,... ) \\-F (Pq'^D'^) ■ 

b) Or that is not the case. But, then, we would be able to contradict the 

F-consistency of (flg/F') as follows: 

1 . Indeed, if it is not the case then there is a a G \ such that 
V Ihc a for all v G V. That is, by construction of F, there is 
a G Qc \ ^'c such that 



2. So, by CTaut, there is a G Q'^ \ D'^ such that 

Lf ( ( /\ a' I a 

\ \a'eF' / 
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3. Thus, by Lift^, there is a G Q'^, \ D'^ such that 






4. Thus, by Refn and QTaut (transitivity of □), there is a G Q'^\D'^ 
such that 

5. Therefore, by QTaut (right weakening of □) 


hf n “ ^ u 


a 


'&D' 




leading to 


^■^ (^ (( n ^ ( n 


,a'£D' 




by several obvious tautological steps. 

6. That is, we have Hf (B(nQ/!?(.)), contradicting the F-consistency 

of {V^Q'M)■ 


In short, we did find V satisfying the classical part of (IIq/D'). Let 
us proceed with the construction of the partition 5. The idea is to find 
a maximally fine partition 5 f of F such that ((IIq/D') □ (ns'g5^[S'|F])) is 
F-consistent, as follows: 


1. Let Gi,, Gn be an ordering of the subsets of F. 

2. Consider the following sequence of formulae; 

• 70 = (n'gF'); 

_ / ilk n [Gfc+i|F]) if this formula is F-consistent 
\ 'jk otherwise 

3. Observe that each 7^ is F-consistent and, furthermore, 7^ is maximally 
so with respect to non entanglement assertions. 
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4. Let U = {G : [GIF] is a factor of 7n}. 

5. Let Sp be composed of all minimal (with respect to inclusion) elements 
of U. Then, thanks to NEntfl, NEntU and NEnt\, it is straightforward 
to prove that Sp is a partition of F. Moreover, = U. 

6. Let S = SpU {qB \ F}. Observe that S is finite. 

7. Since (7^ □ Vm), we proceed working with 7^ in our task of com¬ 
pleting the construction of w and p. 

It remains to find F-factorizable \'ip), together with p and p. As already 
mentioned, the key idea is to reduce everything to a system of (in)equations 
on variables representing amplitudes. But, first we need to add the con¬ 
straints imposed by the relevant axioms. Thanks to Unit, for every G G ^Sp, 
we can establish: (7 ^ □ ((Sacg II~*~)gaI^) ~ ^))- Thanks to NAdm, for 

every (-■(AiT’A)) occurring in 7^, we have: hj? (7^ □ (|T)^^ = 0)). 

Let 7* be the formula 

(7„n| n ((EiiT>G7n = 1 )In( n (iT>F4=n))) 

y yGeucS^ \ \acg J J J \{^{afA)) in 7„ / / 

Observe that we can derive: hiT’ (7^ = 7*). Let (7*)< the conjunction of 
the (in)equations in 7*. Consider the finite system of (in)equations obtained 
from (7*)< by replacing at each term of the form |T)(^^ by a fresh variable 
Now we have to analyse two cases: 

a) Either the system of (in)equations has no solution. But, in this case we 
would be able to contradict the F-consistency of 7^ as follows (using 
the arithmetical oracle): 

1. Let A< be the (finite) set of arithmetic literals occurring in (7*)< 
and Ac be the (finite) set of non-arithmetic literals in (7*)c- 

2. Since (7*)< = (n„gA<i^)) there is a bijection between A< and the 
set of inequations composing the system described above. 

3. From the fact that the system of inequations induced by (7*)< 
has no solution, we conclude that there is no assignment p such 
that p\\- V for all v G A<. 

4. In other words, for all assignment p there exists v G A< such that 
p Ih (Bu) and so, thanks to Oracle, we have: hi? (U„gA< (Bu)). 
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5. Hence, a fortiori, we obtain: hp ((U^gAc(B7)) U (U^gA<(B'w)))- 

6. That is, since 

((U^6Ae(B7))U(U„6A<(Bt;))) = (B((n^6Ae7) n (n,6A<t;))) 

= (B((7:)en(7:)<)) 

= (B7:) 

= (B7n), 

we can conclude hiT’ (B7„), contradicting the F-consistency of 

In- 

b) Or the system has at least one solution and then we can build the envis¬ 
aged F-factorizable w = (y,S, |V’), i^) and p from any of the solutions 
in the following way; 

• F is as described above. 

• 5 is as described above. 

• IV') = {IV’)[_R]}iJeu5 is obtained as follows: 

— |V')[g]('^a) i® solution value of for every G G Sp 

(note that is non-factorizable by construction of Sp); 

— |V')[qB\F] i® non-factorizable unit vector in 

such that = 0 for every v 0 V[qB\F]; 

— IV')[0] = and |V’)[r] = ® sas IV')[S] fo’^ each non empty 

SCR 

R G US. 

• P = {z/GA}GCflnqB,ylcG is chosen as follows: 

— If is a variable of the system then pga takes the value 

of this variable in the adopted solution. 

— Otherwise: 

If G G then pga = (^^aIV')[g]5 

otherwise, the value of vga can be chosen freely in C. 

• p is established as follows: 

— p{x) is equal to the value of x if this variable occurs in the 
system, and given an arbitrary value otherwise; 

— p{z) is equal to the value of 2; if this variable occurs in the 
system, and given an arbitrary value otherwise. 

Such a pair wp satisfies (7*)< and, so, also satishes (rigD). QED 
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6 Concluding remarks 


Using a non trivial extension of the Fagin-Halpern-Megiddo technique to¬ 
gether with three Henkin like completions we were able to prove the finitely 
bounded weak completeness of the proposed finitary axiomatization for 
EQPL. The arithmetical oracle was used once for obtaining a contradiction 
in the case where the induced system of (in)equations has no solution. 

The adoption of an arithmetical oracle for abstracting away the reasoning 
about real and complex numbers allowed us to concentrate on the quantum 
aspects of the calculus. Since the set of valid arithmetical formulae is not 
recursively enumerable there is no hope to find a recursive axiomatization 
while preserving weak completeness over the proposed semantics. But, it 
is viable and possible interesting to relax the semantics and replace the 
oracle with a recursive axiomatization of the algebraic closed helds. Parallel 
developments in probabilistic logic mm, give us hope of obtaining even 
decidable calculi. But, then, we have to pay the price of working with relaxed 
quantum structures that are far away from their roots in the postulates of 
quantum mechanics. Nevertheless, this seems to be the solution towards 
model checking techniques for EQPL and its dynamical extensions. Such 
model checking techniques also require the development of the theory of 
quantum automata m- 

The weak completeness result obtained in this paper shows that the pro¬ 
posed language of EQPL is appropriate for the proposed exogenous seman¬ 
tics. Therefore, EQPL constitutes a sound basis for further developments 
of our approach to quantum reasoning, namely towards dynamical exten¬ 
sions for reasoning about the evolution of quantum systems and protocols. 
For preliminary results in this direction, see m where DEQPL (a dynam¬ 
ical extension of EQPL) is outlined. Recent work on dynamical versions of 
traditional quantum logic should also be taken into account. Another 
interesting development, also from the applications point of view, will be 
directed at a EQFOL (a POL version of exogenous quantum logic). 

The detailed analysis of the weak completeness proof reinforces the idea 
(already present in the choice of the EQPL abbreviations) of the key role, 
when using EQPL for reasoning, of a finite context of qubit symbols. One 
wonders if this assumption can be relaxed to any recursive set of qubits by 
starting with classical tu-infinitary propositional logic m. At least from a 
theoretical point of view, this line of work should be explored. 

As we saw, the semantics of EQPL is based on pure quantum states of 
collections of qubits. Recall that pure quantum states are unit vectors of 
the underlying Hilbert space. In consequence, EQPL provides the means 
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for asserting properties of and reason about such vectors. Therefore, EQPL 
is not insensitive to the global phase of the quantum state. One may argue 
that it should be insensitive since no physical measurement will ever be able 
to distinguish two quantum states that are equivalent up to global phase. 
We decided to make EQPL as it is (that is, sensitive to global phase) for 
two reasons. In practice, physicists and quantum computer scientists need 
to work with both levels of abstraction. Sometimes they want to work with 
states as unit vectors. Sometimes they want to abstract away the global 
phase. Therefore, a calculus supporting the former level of abstraction is 
also useful. The second reason is a consequence of the fact that forgetting 
global phase requires a major semantic shift. Indeed, it is better solved by 
identifying a quantum state, not with a unit vector of the underlying Hilbert 
space, but, instead, with a density operator working on that space, that is, 
working with ensembles or mixed quantum states in general. 

Such shift towards a semantics based on density operators will lead to a 
quite different quantum logic (but still extending classical logic by applying 
the exogenous approach) that will also be useful for reasoning about quan¬ 
tum systems evolving under partial tracing, besides unitary transformations 
and measurements. Clearly, this is yet another line of research that will 
deserve attention. 

Finally, the relationship between the exogenous quantum logics and the 
more traditional quantum logics (based on the original Birkhoff and von 
Neumann proposal) should be explored. At the preliminary stage of work 
in this direction, it seems that most of the qualitative assertions possible 
in the latter can be made in the former and that most of the quantitative 
assertions possible in the former can be borrowed by extensions of the latter. 
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